To enhance and protect organizational value by providing risk-based and objective assurance, advice and insight, whilst consistently building trust and strengthening the relationship with our clients, through the delivery of high quality and distinctive internal audit services.

Our Services

Internal Audit Services

internal audit services

Compliance Audits

Compliance Audits

External Quality Assesment

External Quality Assesment

Forensic Investigations

Forensic Investigation

Risk Management

Risk Management

Internal Audit (IA) is an independent, objective assurance and consulting activity designed to add value and improve an organization’s operations.

IA is responsible to assess the effectiveness of risk management, control and governance processes and to provide insight and recommendations that can enhance these processes

IA may also involve conducting fraud investigations to identify fraudulent acts and conducting post investigation fraud audits to identify control breakdowns and establish financial loss.



At FORFIRM, we operate under a single global audit methodology which is codified in the FORFIRM Audit Guide, our based electronic audit policy and methodology handbook. The continuous improvement of our methodology is a collaborative effort of technical experts and practitioners from multiple countries with oversight and coordination from three groups.

The FORFIRM Audit Approach


We begin the Audit Comfort Cycle with the scoping process. What does management need to get comfort on?  How do we answer this question?

It requires us to consider what we know about the industry, the marketplace and the company to form our own point of view on the risks that management should be concerned about.

The Audit Comfort Cycle

We start this process from the top down through the organization to get an understanding of the real business objectives and risks at our clients. Our audit approach is therefore analogous to the “scoping” of target clients. When the Firm pursues business opportunities, we obtain an understanding of the business from the top-down. We don’t begin from the bottom of the organization. The same holds true for our recurring engagements.

Applying Comfort Cycle form the Top-Down

We deliver projects in blockchain, AI, cloud computing and more...